$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft File: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft (raw, json) Hash identifier: 4sDzMlOzBinoE9iQDJGJvuSqj4I47q+pT2eZq9kx4Vw= Subject key identifier: 4B:44:A7:09:72:43:16:85:83:10:90:30:CA:BE:FF:EE:33:25:B5:4E Authority key identifier: E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29 Certificate issuer: /CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829 Certificate serial: 65E2BCBDC6E15226A8B6C6186EF7C1F3BF296AEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 08:48:31 +0000 Manifest this update: Mon 02 Nov 2026 08:43:31 +0000 Manifest next update: Tue 03 Nov 2026 10:13:31 +0000 Files and hashes: 1: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: cYom1MPHQVGdhZnlRacbk/Al2JcVJhr0BqbkjsZoDkI=) 2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: B9vjSD4xlqQG0P6W1yM2st0HnliY/J6hgpX93qj/1sg=) 3: E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl (hash: Cg/kjPjsQ5M1CRpVb1lokm6s1b/bLK9YKWIXHpGmTtM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e2:bc:bd:c6:e1:52:26:a8:b6:c6:18:6e:f7:c1:f3:bf:29:6a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829 Validity Not Before: Nov 2 08:43:31 2026 GMT Not After : Nov 3 10:13:31 2026 GMT Subject: CN=4B44A7097243168583109030CABEFFEE3325B54E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:2e:3d:88:ce:28:9c:b5:76:45:f7:bb:f6: 6d:bd:3e:81:39:74:76:2b:d9:48:56:91:0f:11:d3: 58:06:fc:dc:1e:4f:c0:f6:74:e3:23:b7:2b:1c:30: cf:01:5c:53:82:f1:ea:3d:69:af:0c:1a:1e:c5:6b: e8:83:95:48:1b:52:52:4a:0e:90:fa:38:39:2f:94: f0:f4:be:09:6f:98:4a:e3:ea:ad:6f:16:2c:9e:2b: 09:d5:1f:cd:b3:99:3b:88:e9:fd:61:a2:9c:00:c5: 87:0a:0c:a7:bc:0b:84:aa:28:97:7b:5c:10:3d:f3: 66:df:40:3f:43:58:cc:b6:52:af:92:c3:37:6c:ca: 77:c7:f5:44:32:4e:ec:d3:43:24:52:59:23:5b:fe: df:0d:c8:ee:1c:4e:a0:10:37:b9:b3:91:f4:ab:9b: 15:9c:f3:1f:dd:4a:b5:b5:98:11:2c:50:8d:7d:2a: 19:cf:b4:62:bb:d4:e7:11:04:8e:48:c1:3b:61:cc: 99:b6:29:1c:9f:a1:a7:e6:81:1a:b3:bb:2a:bc:8f: 18:3a:59:a1:7d:76:9d:a8:8d:10:3f:67:57:aa:57: 44:12:bb:64:40:0b:97:91:e6:ba:5b:7c:85:6e:2c: 36:6e:33:90:68:b2:2a:cb:cc:9d:46:4f:93:8f:76: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:A7:09:72:43:16:85:83:10:90:30:CA:BE:FF:EE:33:25:B5:4E X509v3 Authority Key Identifier: keyid:E2:C4:DF:A7:C9:AC:CF:0D:5E:35:50:84:6B:4F:D7:64:8A:F5:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/E2C4DFA7C9ACCF0D5E3550846B4FD7648AF59829.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:64:68:6c:00:55:8c:d7:71:8e:46:ba:11:2b:8c:83:96:c7: 19:30:aa:ed:c9:f3:d8:4e:35:41:e7:31:98:11:e3:7c:1c:1c: d9:32:87:1a:df:e1:fd:f8:d7:21:f1:e0:d4:65:28:d4:ff:74: 05:06:fd:12:79:70:bd:8e:6c:c6:0c:46:59:f4:48:13:8b:5f: bb:77:5a:14:29:9e:40:77:80:c2:e3:8b:19:8f:2a:9e:05:4d: d7:58:fe:07:28:c4:3b:2b:df:8e:db:36:40:7d:fd:21:f3:f4: 4a:69:83:1b:52:99:f4:a2:28:0a:fa:30:5c:7f:b6:c0:5a:89: 84:a0:0e:b2:67:2f:c3:78:e0:4e:40:17:7a:7c:43:4b:d3:de: fe:49:a4:56:18:9b:9c:8e:1c:70:79:46:aa:ea:85:3f:b9:38: a1:4a:90:3b:d0:60:f1:0c:00:80:4a:eb:2e:14:80:27:b5:67: 66:74:9b:93:df:ab:ea:13:b9:54:78:ee:2d:60:44:41:08:97: 6a:22:27:cb:41:18:1b:53:41:15:13:3a:61:56:ef:cd:ee:35: d5:39:5a:1f:23:3f:6c:79:5f:0c:45:79:2a:87:8d:27:f5:04: 97:73:58:a8:94:84:b3:d9:28:cf:6d:ef:13:07:05:43:73:51: 0a:87:52:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeK8vcbhUiaotsYYbvfB878pau4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDNERGQTdDOUFDQ0YwRDVFMzU1MDg0NkI0RkQ3NjQ4 QUY1OTgyOTAeFw0yNjExMDIwODQzMzFaFw0yNjExMDMxMDEzMzFaMDMxMTAvBgNV BAMTKDRCNDRBNzA5NzI0MzE2ODU4MzEwOTAzMENBQkVGRkVFMzMyNUI1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDS49iM4onLV2Rfe79m29PoE5 dHYr2UhWkQ8R01gG/NweT8D2dOMjtyscMM8BXFOC8eo9aa8MGh7Fa+iDlUgbUlJK DpD6ODkvlPD0vglvmErj6q1vFiyeKwnVH82zmTuI6f1hopwAxYcKDKe8C4SqKJd7 XBA982bfQD9DWMy2Uq+SwzdsynfH9UQyTuzTQyRSWSNb/t8NyO4cTqAQN7mzkfSr mxWc8x/dSrW1mBEsUI19KhnPtGK71OcRBI5IwTthzJm2KRyfoafmgRqzuyq8jxg6 WaF9dp2ojRA/Z1eqV0QSu2RAC5eR5rpbfIVuLDZuM5BosirLzJ1GT5OPdrn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0SnCXJDFoWDEJAwyr7/7jMltU4wHwYDVR0j BBgwFoAU4sTfp8mszw1eNVCEa0/XZIr1mCkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVlYWJhY2QtMjhlYi00Yjk2LTg2MTAtZGJiNGIwNmZjOGJkLzAvRTJDNERGQTdD OUFDQ0YwRDVFMzU1MDg0NkI0RkQ3NjQ4QUY1OTgyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMkM0REZBN0M5QUNDRjBENUUzNTUwODQ2QjRGRDc2NDhBRjU5 ODI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvRTJDNERGQTdDOUFDQ0YwRDVFMzU1MDg0NkI0RkQ3 NjQ4QUY1OTgyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVkaGwAVYzXcY5GuhErjIOWxxkwqu3J89hO NUHnMZgR43wcHNkyhxrf4f341yHx4NRlKNT/dAUG/RJ5cL2ObMYMRln0SBOLX7t3 WhQpnkB3gMLjixmPKp4FTddY/gcoxDsr347bNkB9/SHz9EppgxtSmfSiKAr6MFx/ tsBaiYSgDrJnL8N44E5AF3p8Q0vT3v5JpFYYm5yOHHB5RqrqhT+5OKFKkDvQYPEM AIBK6y4UgCe1Z2Z0m5Pfq+oTuVR47i1gREEIl2oiJ8tBGBtTQRUTOmFW783uNdU5 Wh8jP2x5XwxFeSqHjSf1BJdzWKiUhLPZKM9t7xMHBUNzUQqHUis= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:35 2026 by rpki-client